The upgrade process breaks the HA pair during upgrade and pairs it again after the upgrade is
completed.

Use this procedure to upgrade BIG-IQ Security through a combination of the system interface and
the command line interface.

Breaking Up an HA Pair Running 4.3 Software

The upgrade process breaks the HA pair during upgrade and pairs it again after the
upgrade is completed. Use this procedure to break an HA Pair running 4.3 software.

Break the HA pair by removing the standby node.

Log in to active BIG-IQ and at the top-right corner of the screen, select
System and Overview.
The Localhost screen appears.

Select High Availability from the menu on the left.
The configuration for the Peer device (the standby node) appears in the
viewing pane.

Click the Delete button in the top-right corner of the
panel.
A pop-up appears to confirm that you want to remove the standby
node.

Click the Remove button to confirm.

Watch the HA-status indicator in the top-left corner of the screen. When
the HA pair is broken, it changes from "Active (Primary)" to "Standalone."

The status indicator at the top-left of the screen now reports "Standalone" on
both BIG-IQ devices.

Use a secure copy method to copy the image (.ISO) to the /shared/images directory on
both nodes, formerly in the HA pair.
You can use SCP, FTP, SFTP or any other means of securely transferring ISOs between
hosts.
scp <big-iq-iso-name>
root@<big-iq-standby-node-url>:/shared/images/.

Both nodes are now standalone and have the same ISO file on them.

Breaking Up an HA Pair Running 4.4 Software

The upgrade process breaks the HA pair during upgrade and pairs it again after the
upgrade is completed. Use this procedure to break an HA Pair running 4.4 software.

Break the HA pair by removing the standby node from the management group.

Log in to BIG-IQ and from the drop-down list, select
System

In the Systems panel, expand the Management Group.

Select the standby node.

Hover over the gear icon, then click it and select
Properties.

In the expanded panel, click Remove.

The status indicator at the top-left of the screen now reports "Standalone" on
both BIG-IQ devices.

Use a secure copy method to copy the image (.ISO) to the /shared/images directory on
both nodes, formerly in the HA pair.
You can use SCP, FTP, SFTP or any other means of securely transferring ISOs between
hosts.
scp <big-iq-iso-name>
root@<big-iq-standby-node-url>:/shared/images/.

Both nodes are now standalone and have the same ISO file on them.

Upgrading BIG-IQ Security (GUI)

Use this procedure to upgrade BIG-IQ Security through the system (GUI) interface.

This step applies to nodes running 4.3 software; skip to the next step if your nodes
are running 4.4 software. Otherwise, repeat these substeps on both nodes to upgrade the
image on both.

Log in to active BIG-IQ and at the top-right corner of the screen, select
System and Overview.
The Localhost screen appears.

Select Software Update from the menu on the left.
Information about the current software appears in the viewing
area.

From the Software Image drop-down list, select the image to use for the update.
This is the image you downloaded above.

From the Install Location drop-down list, select the location to use for the
update.

In the Option area, click both options.

Click the Apply button in the lower-right corner of the
panel.
A pop-up asks you to confirm that you want to reboot the node.

Click the OK button in the pop up.
The BIG-IQ system loads the new software and reboots.

This step applies to nodes running 4.4 software; skip this step if your nodes are
running 4.3 software. Otherwise, repeat these substeps on both nodes to upgrade the image
on both.

From BIG-IQ System, expand Management Group.

Hover over the gear icon, then click it and select
Properties.

Select the Software Update tab.

Click Update.

From the Software Image drop-down list, select the image to use for the update.
This is the image you downloaded above.

From the Install Location drop-down list, select the location to use for the
update.

In the Option area, click Reboot After Live Install.

For both nodes, verify that the image is booted on the correct volume using the command
tmsh show sys software.

From BIG-IQ System, re-establish the HA pair.
When reestablishing the HA pair, the source device copies its common configuration
data to the target device. The source device is the device where you start the HA
re-pairing process. Choose a source device whose configuration data is the most
up-to-date.

On the node you have selected to be the Primary/Active node, hover over the
gear icon for the management group.

Click Add Device.

Enter the HA Communication Address of the peer device, and admin credentials for
the Secondary BIG-IQ device.

For Network Security configurations, select Active-Standby as the High Availability
Mode.

Click the Add button in the banner of the New Device expanded panel.

Affirm the confirmation to start the pairing process.

Expand the Management Group and monitor the status changes for the newly-added
device.

Monitor the status updates in the new device entry under the Management
Group.

Monitor the device/cluster status indicator in the top left of the screen.

When the indicator changes to Active (Primary) the pairing has completed
successfully.

Examine the configuration of both nodes visually to verify that they are in sync.

Both nodes are upgraded. The upgrade is complete.

Upgrading BIG-IQ Security (CLI)

Use this procedure to upgrade BIG-IQ Security through a combination of the system (GUI)
interface and the command-line (tmsh) interface.

Monitor the progress of the upgrade using the command tmsh show sys
software.

Change the boot partition/volume using the switchboot command.
It is critical to include the switch -b in the following
command.
switchboot -b volume-name

Reboot using the command reboot.

From BIG-IQ System, re-establish the HA pair.
When reestablishing the HA pair, the source device copies its common configuration
data to the target device. The source device is the device where you start the HA
re-pairing process. Choose a source device whose configuration data is the most
up-to-date.

On the node you have selected to be the Primary/Active node, hover over the
gear icon for the management group.

Click Add Device.

Enter the HA Communication Address of the peer device, and admin credentials for
the Secondary BIG-IQ device.

For Network Security configurations, select Active-Standby as the High Availability
Mode.

Click the Add button in the banner of the New Device expanded panel.

Affirm the confirmation to start the pairing process.

Expand the Management Group and monitor the status changes for the newly-added
device.

Monitor the status updates in the new device entry under the Management
Group.

Monitor the device/cluster status indicator in the top left of the screen.

When the indicator changes to Active (Primary) the pairing has completed
successfully.

Examine the configuration of both nodes visually to verify that they are in sync.